General

  • Target

    bbbbc96f1acb90b4bb2156c0608098275674576035d1136a26c0a6a685ad6cbf

  • Size

    696KB

  • Sample

    241220-g2egmssndl

  • MD5

    a3942cffcae710e8a82b0f7eab7d4b58

  • SHA1

    2410000c0ae014eac20097ac1886ec3d6714ac51

  • SHA256

    bbbbc96f1acb90b4bb2156c0608098275674576035d1136a26c0a6a685ad6cbf

  • SHA512

    c29bf548199463aae91484682b6fad489da4c836122ec937fe6d2375e57a57207324f67e3cc1baba5b7b074c8ff19c75cd22172fdbfe19c03fbfb8123d848d74

  • SSDEEP

    12288:k0IpdahiaMeNxCZKxnwZIJV77UX7svTXifANCrvbyAQoI7sCJ+6G8q/sexMBjiBk:k0IvJFMaKxnR1oXUifNgQwtG8qEe

Malware Config

Targets

    • Target

      bbbbc96f1acb90b4bb2156c0608098275674576035d1136a26c0a6a685ad6cbf

    • Size

      696KB

    • MD5

      a3942cffcae710e8a82b0f7eab7d4b58

    • SHA1

      2410000c0ae014eac20097ac1886ec3d6714ac51

    • SHA256

      bbbbc96f1acb90b4bb2156c0608098275674576035d1136a26c0a6a685ad6cbf

    • SHA512

      c29bf548199463aae91484682b6fad489da4c836122ec937fe6d2375e57a57207324f67e3cc1baba5b7b074c8ff19c75cd22172fdbfe19c03fbfb8123d848d74

    • SSDEEP

      12288:k0IpdahiaMeNxCZKxnwZIJV77UX7svTXifANCrvbyAQoI7sCJ+6G8q/sexMBjiBk:k0IvJFMaKxnR1oXUifNgQwtG8qEe

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks